漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Metasys Reporting Engine (MRE) Web Services - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerability Description
Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
N/A
Vulnerability Title
Johnson Controls Metasys Reporting Engine Web Services 路径遍历漏洞
Vulnerability Description
Johnson Controls Metasys Reporting Engine Web Services是美国Johnson Controls公司的一个系统硬件。提供该网络控制器使用信息技术的最新发展来确保Metasys系统轻松集成并连接到不断扩展的浏览器和远程操作中心。 Johnson Controls Metasys Reporting Engine Web Services 中存在路径遍历漏洞。该漏洞源于未正确清除可解析为受限目录之外位置的路径名元素。成功利用此漏洞可能使未经身份验证的远程攻击者
CVSS Information
N/A
Vulnerability Type
N/A